Lucene search
Veracode Vulnerability DatabaseVERACODE:39255HistoryFeb 14, 2023 - 7:21 a.m.
Regular Expression Denial Of Service (ReDoS)
2023-02-1407:21:09
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
10
vulnerability
redos
regular expression denial of service
sideway/formula
index.js
polynomial execution time
application crash
0.001 Low
EPSS
Percentile
34.6%
sideway/formula is vulnerable to Regular Expression Denial Of Service (ReDoS). The vulnerability exists in index.js due to regular expression complexity which allows attacker to provide crafted strings to the formula’s parser that might lead to polynomial execution time causing an application crash.
| CPE | Name | Operator | Version |
|---|---|---|---|
| @sideway/formula | eq | 3.0.0 | |
| @sideway/formula | eq | 3.0.0 |
Related
cve
cve
CVE-2023-25166
2023-02-08 20:15:25
prion
prion
Design/Logic Flaw
2023-02-08 20:15:00
osv
osv
CVE-2023-25166
2023-02-08 20:15:25
redhatcve
redhatcve
CVE-2023-25166
2023-02-09 04:58:18
cvelist
cvelist
CVE-2023-25166 Regular Expression Denial of Service (ReDoS) Vulnerability
2023-02-08 19:28:29
github
github
hackerone
hackerone
nvd
nvd
CVE-2023-25166
2023-02-08 20:15:25